Behavioral task
behavioral1
Sample
c996e8231e6baf6544d3a95489005a53.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c996e8231e6baf6544d3a95489005a53.exe
Resource
win10v2004-20240226-en
General
-
Target
c996e8231e6baf6544d3a95489005a53
-
Size
3.9MB
-
MD5
c996e8231e6baf6544d3a95489005a53
-
SHA1
36aa02315ffa0d5fee6a91b438a9877a7d55f483
-
SHA256
f75fb833b6d19a95f7eb2db0658f3d3675051d78da6439a65208ce5edb41d885
-
SHA512
d162329eb70068c3d63c70271f998bf2f4df6f429c35332e6bbbf7ed4ff7dbbf931dd1b67a8e825c2787593fffe34f5707a97460bb45975808b08f235d0bc499
-
SSDEEP
98304:84l+qrgAf9PqEcQm8C9iAfDBL+EI3kYAf9PqEcQm8C9iAf:BtrXD89MZ3WD89
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c996e8231e6baf6544d3a95489005a53
Files
-
c996e8231e6baf6544d3a95489005a53.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE